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DETAILED ACTION 

1. Claims 1-34 are pending. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis 
for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1 ) an application for patent, published under section 
122(b), by another filed in the United States before the invention by the applicant for 
patent or (2) a patent granted on an application for patent by another filed in the United 
States before the invention by the applicant for patent, except that an international 
application filed under the treaty defined in section 351(a) shall have the effects for 
purposes of this subsection of an application filed in the United States only if the 
international application designated the United States and was published under Article 
21(2) of such treaty in the English language. 

2. Claims 1-34 are rejected under 35 U.S.C. 102(e) as being anticipated by Pinkerton, 
et al. (US 7,007,103). 

As per claim 1: 

Pinkerton discloses a method for processing data packets sent through a network, 
comprising: 

receiving data packets from a host through the network wherein the received packets 
were, prior to receipt, encrypted and fragmented after encryption; (col.1, lines 50-55 and 
col.11, lines 41-44) 

reassembling the fragmented packets using a communication protocol offload engine in 
a network adaptor coupling a host central processing unit to the network; (col.12, lines 20-25 
and col.18, lines 15-21) 
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decrypting the reassembled packets of encryption using a security offload engine in the 
network adaptor; and (col.6, lines 40-44 and col.20, lines 54-55) 

forwarding the decrypted and reassembled packets to the communication protocol 
offload engine, (col.20, lines 55-57) 

As per claim 2: See col.18, lines 15-21 and col.20, lines 54-57 ; discusses the method of 
claim 1 further comprising: receiving from a remote host through the network additional packets 
which were encrypted in a first encryption, fragmented after the first encryption and encrypted in 
a second encryption after the fragmentation; decrypting the fragmented packets of the second 
encryption of using the security offload engine; reassembling the fragmented packets decrypted 
of the second encryption using a communication protocol offload engine; decrypting the 
reassembled packets of the first encryption using the security offload engine; and forwarding the 
decrypted and reassembled additional packets to the communication protocol offload engine. 
As per claim 3: See col.9, lines 45-51 and col.18, lines 15-21; discusses the method of claim 
1, further comprising: receiving from a remote host through the network additional packets 
which were encrypted and fragmented after all encryption; reassembling the fragmented 
additional packets using the communication protocol offload engine; decrypting the 
reassembled additional packets of encryption using the security offload engine; and forwarding 
the decrypted and reassembled additional packets to the communication protocol offload 
engine. 

As per claim 4: See col.18, lines 15-30 and col.20, lines 54-57; discusses the method of 
claim 1 , further comprising: receiving from a remote host through the network additional packets 
which were fragmented and then encrypted; decrypting the fragmented additional packets of 
encryption using the security offload engine; and reassembling the fragmented and decrypted 
additional packets using the communication protocol offload engine. 
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As per claim 5: See col.11, lines 41-44; discusses the method of claim 1 , further comprising: 
receiving from a remote host through the network additional packets which were fragmented but 
not encrypted; reassembling the fragmented and unencrypted packets using the communication 
protocol offload engine. 

As per claim 6: See col.1, lines 50-55 and col.9, lines 45-48; discusses the method of claim 
1, further comprising: receiving from a remote host through the network additional packets 
which were encrypted but not fragmented; decrypting the unfragmented packets of encryption 
using the security offload engine; and forwarding the decrypted additional packets to the 
communication protocol offload engine. 

As per claim 7: See col.2, lines 12-16 and 49-63; discusses the method of claim 2, wherein 
the first encryption is a transport mode encryption and the second encryption is a tunnel mode 
encryption. 

As per claim 8: See col.11, lines 41-44 and col.20, lines 47-51; discusses the method of 
claim 1, further comprising: feeding the received packets through a feedforward path from a 
network interface receiver in the network adaptor, through the security offload engine and to the 
communication protocol offload engine to be reassembled; and feeding the reassembled 
packets from the communication protocol offload engine through a feedback path from the 
communication protocol offload engine to the security offload engine to be decrypted. 
As per claim 9: See col.18, lines 15-21 and col.20, lines 54-57 ; discusses the method of 
claim 8, wherein said forwarding comprises: feeding the decrypted and reassembled packets 
through the feedforward path from the security offload engine to the communication protocol 
offload engine; said method further comprising: extracting a data payload from the decrypted 
and reassembled packets using the communication protocol offload engine. 
As per claim 10: See col.6, lines 40-44 and col.20, lines 47-51; discusses the method of 
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claim 8, further comprising: multiplexing a flow of data packets in the feedforward path from the 
network interface receiver to the security offload engine and a flow of data packets in the 
feedback path from the communication protocol offload engine to the security offload engine. 
As per claim 11: 

Pinkerton discloses a network adaptor for use with a network, comprising: 

a security offload engine having an input and an output and adapted to decrypt 
encrypted packets; (col.1, lines 50-55) 

a communication protocol offload engine having an input and an output and adapted to 
reassemble fragmented packets; (col.2, lines 12-16 and 49-63) 

a network interface receiver having an output coupled to the security offload engine input 
and an input adapted to receive from the network packets which were, prior to receipt, 
encrypted and fragmented after encryption; (col.6, lines 40-44 and col.12, lines 20-25) 

a feedforward path coupling said receiver output to said security offload engine input and 
said security offload engine output to said communication protocol offload engine input; (col.11, 
lines 41-44) 

a feedback path coupling said communication protocol offload engine output to said 
security offload engine input; and (col.2, lines 50-65 and col.20, lines 47-51) 

logic adapted to feed the fragmented packets from the network interface receiver 
through the feedforward path to the communication protocol offload engine to be reassembled 
in the communication protocol offload engine, to feed the reassembled packets from the 
communication protocol offload engine through the feedback path to the security offload engine 
to be decrypted in the security offload engine, and to feed the decrypted and reassembled 
packets from the security offload engine, through the feedforward path to the communication 
protocol offload engine, (col.18, lines 15-21 and col.20, lines 55-57) 
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As per claim 12: See col.18, lines 15-21 and col.20, lines 24-57; discusses the adaptor of 
claim 11: wherein said receiver is adapted to receive from the network additional packets which 
were encrypted in a first encryption, fragmented after the first encryption and encrypted in a 
second encryption after the fragmentation; and wherein the logic is adapted to feed the 
fragmented packets of the second encryption from the network interface receiver through the 
feedforward path to the security offload engine to be decrypted of the second encryption in the 
security offload engine; to feed the fragmented packets decrypted of the second encryption from 
the security offload engine through the feedforward path to the communication protocol offload 
engine to be reassembled in the communication protocol offload engine, to feed the 
reassembled packets of the first encryption from the communication protocol offload engine 
through the feedback path to the security offload engine to be decrypted of the first encryption in 
the security offload engine, and to feed the decrypted and reassembled additional packets 
packets from the security offload engine, through the feedforward path to the communication 
protocol offload engine. 

As per claim 13: See col.18, lines 15-21 and col.20, lines 55-57; discusses a adaptor of 
claim 11: wherein said receiver is adapted to receive from the network additional packets which 
were encrypted and fragmented after all encryption; and wherein the logic is adapted to feed the 
fragmented additional packets from the network interface receiver through the feedforward path 
to the communication protocol offload engine to be reassembled in the communication protocol 
offload engine, to feed the reassembled additional packets from the communication protocol 
offload engine through the feedback path to the security offload engine to be decrypted in the 
security offload engine, and to feed the decrypted and reassembled additional packets packets 
from the security offload engine, through the feedforward path to the communication protocol 
offload engine. 
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As per claim 14: See col.1, lines 50-55 and col.20, lines 24-57; discusses the adaptor of 
claim 11: wherein said receiver is adapted to receive from the network additional packets which 
were fragmented and then encrypted; and wherein the logic is adapted to feed the fragmented 
additional packets from the network interface receiver through the feedforward path to the 
security offload engine to be decrypted in the security offload engine, and to feed the decrypted 
additional packets from the security offload engine, through the feedforward path to the 
communication protocol offload engine. 

As per claim 15: See col.1 1, lines 41-44 and col.20, lines 47-51; discusses the adaptor of 
claim 11: wherein said receiver is adapted to receive from the network additional packets which 
were fragmented but not encrypted; and wherein the logic is adapted to feed the fragmented 
additional packets from the network interface receiver through the feedforward path to the 
communication protocol offload engine to be reassembled in the communication protocol offload 
engine. 

As per claim 16: See col.1 1, lines 41-44 and col.20, lines 47-51; discusses the adaptor of 
claim 11: wherein said receiver is adapted to receive from the network additional packets which 
were encrypted but not fragmented; and wherein the logic is adapted to feed the encrypted 
additional packets from the network interface receiver through the feedforward path to the 
security offload engine to be decrypted of the encryption in the security offload engine, and to 
feed the decrypted and additional packets from the security offload engine, through the 
feedforward path to the communication protocol offload engine. 

As per claim 17: See col.2, lines 12-16 and 49-63; discusses the adaptor of claim 12 wherein 
the first encryption is a transport mode encryption and the second encryption is a tunnel mode 
encryption. 

As per claim 18: See col.18, lines 15-21 and col.20, lines 55-57; discusses the adaptor of 
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claim 111 the communication protocol offload engine is adapted to extracting a data payload 
from the decrypted and reassembled packets. 

As per claim 19: See col.6, lines 40-44 and col.12, lines 20-25; discusses the adaptor of 
claim 1 1 wherein the feedback path and the feedforward path includes a multiplexor adapted to 
multiplex a flow of data packets in the feedforward path from the network interface receiver 
output to the security offload engine input and a flow of data packets in the feedback path from 
the communication protocol offload engine output to the security offload engine input 
As per claim 20: See col. 18, lines 15-21 and col.20, lines 55-57; discusses the adaptor of 
claim 1 1 wherein the feedback path includes a buffer wherein said logic is adapted to store 
reassembled packets from the communication protocol offload engine to await multiplexing by 
said multiplexor to the security offload engine input. 
As per claim 21: 

Pinkerton discloses a system for use with a network, comprising: 

a system memory; a processor coupled to the system memory; (col.4, lines 25-35) 

data storage coupled to the processor and the system memory; 

a data storage controller adapted to manage Input/Output (I/O) access to the data 
storage; (col.5, lines 44-55) 

and a network adaptor which includes: 

a security offload engine coupled to the memory and having an input and an output and 
adapted to decrypt encrypted packets; (col.4, lines 50-57) 

a communication protocol offload engine having an input and an output and adapted to 
reassemble fragmented packets; (col.1, lines 50-55 and col.2, lines 12-16) 
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a network interface receiver having an output coupled to the security offload engine input 
and an input adapted to receive from the network packets which were, prior to receipt, 
encrypted and fragmented after encryption; (col.6, lines 40-44 and col.1 1 , lines 41 -44) 

a feedforward path coupling said receiver output to said security offload engine input and 
said security offload engine output to said communication protocol offload engine input; (cqI.2, 
lines 50-65 and col.20, lines 47-51) 

a feedback path coupling said communication protocol offload engine output to said 
security offload engine input; and (col.1, lines 50-55 and col.2, lines 12-16) 

logic adapted to feed the fragmented packets from the network interface receiver 
through the feedforward path to the communication protocol offload engine to be reassembled 
in the communication protocol offload engine, to feed the reassembled packets from the 
communication protocol offload engine through the feedback path to the security offload engine 
to be decrypted in the security offload engine, and to feed the decrypted and reassembled 
packets from the security offload engine, through the feedforward path to the communication 
protocol offload engine, (col.1 8, lines 15-21 and col.20, lines 55-57) 
As per claim 22: 

Pinkerton discloses an article of manufacture for use with a network wherein the article 
of manufacture causes operations to be performed, the operations comprising: 

receiving data packets from a remote host through the network wherein the received 
packets were, prior to receipt, encrypted and fragmented after encryption; (col.1, lines 50-55 
and col.1 1, lines 4144) 

reassembling the fragmented packets using a communication protocol offload engine in 
a network adaptor coupling a host central processing unit to the network; (col.18, lines 15-21) 
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decrypting the reassembled packets of encryption using a security offload engine in the 
network adaptor; and (col.2, lines 12-16 and 49-63) 

forwarding the decrypted and reassembled packets to the communication protocol 
offload engine, (col.20, lines 55-57) 

As per claim 23: See col. 18, lines 15-21 and col.20, lines 24-57; discusses the article of 
manufacture of claim 22, wherein the operations further comprise: receiving from a remote host 
through the network additional packets which were encrypted in a first encryption, fragmented 
after the first encryption and encrypted in a second encryption after the fragmentation; 
decrypting the fragmented packets of the second encryption of using the security offload engine; 
reassembling the fragmented packets decrypted of the second encryption using a 
communication protocol offload engine; decrypting the reassembled packets of the first 
encryption using the security offload engine; and forwarding the decrypted and reassembled 
additional packets to the communication protocol offload engine. 

As per claim 24: See col.18, lines 15-21 and col.20, lines 24-57; discusses the article of 
manufacture of claim 22, wherein the operations further comprise: receiving from a remote host 
through the network additional packets which were encrypted and fragmented after all 
encryption; reassembling the fragmented additional packets using the communication protocol 
offload engine; decrypting the reassembled additional packets of encryption using the security 
offload engine; and forwarding the decrypted and reassembled additional packets to the 
communication protocol offload engine. 

As per claim 25: See col.11, lines 41-44; discusses the article of manufacture of claim 22, 
wherein the operations further comprise: receiving from a remote host through the network 
additional packets which were fragmented and then encrypted; decrypting the fragmented 
additional packets of encryption using the security offload engine; and reassembling the 
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fragmented and decrypted additional packets using the communication protocol offload engine. 
As per claim 26: See col.11, lines 41-44 and col.20, lines 47-51; discusses the article of 
manufacture of claim 22, wherein the operations further comprise: receiving from a remote host 
through the network additional packets which were fragmented but not encrypted; reassembling 
the fragmented and unencrypted packets using the communication protocol offload engine. 
As per claim 27: See col.11, lines 41-44 and col.20, lines 47-51; discusses the article of 
manufacture of claim 22, wherein the operations further comprise: receiving from a remote host 
through the network additional packets which were encrypted but not fragmented; decrypting 
the unfragmented packets of encryption using the security offload engine; and forwarding the 
decrypted additional packets to the communication protocol offload engine. 
As per claim 28: See col.2, lines 12-16 and 49-63; discusses the article of manufacture of 
claim 23, wherein the first encryption is a transport mode encryption and the second encryption 
is a tunnel mode encryption. 

As per claim 29: See col.18, lines 15-21 and col.20, lines 55-57; discusses the article of 
manufacture of claim 22, wherein the operations further comprise: feeding the received packets 
through a feedforward path from a network interface receiver in the network adaptor, through 
the security offload engine and to the communication protocol offload engine to be 
reassembled; and feeding the reassembled packets from the communication protocol offload 
engine through a feedback path from the communication protocol offload engine to the security 
offload engine to be decrypted. 

As per claim 30: See col.18, lines 15-21 and col.20, lines 55-57; discusses the article of 
manufacture of claim 29, wherein said forwarding operation comprises: feeding the decrypted 
and reassembled packets through the feedforward path from the security offload engine to the 
communication protocol offload engine; and wherein the operations further comprise extracting 
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a data payload from the decrypted and reassembled packets using the communication protocol 
offload engine. 

As per claim 31 : See col.6, lines 40-44 and col.12, lines 20-25;; discusses the article of 
manufacture of claim 22, wherein the operations further comprise: multiplexing a flow of data 
packets in the feedforward path from the network interface receiver to the security offload 
engine and a flow of data packets in the feedback path from the communication protocol offload 
engine to the security offload engine. 

As per claim 32: See col.6, lines 40-44 and col.111, lines 40-44; discusses the system of 
claim 21 , wherein the logic is further adapted to: multiplex a flow of data packets in the 
feedforward path from the network interface receiver to the security offload engine and a flow of 
data packets in the feedback path from the communication protocol offload engine to the 
security offload engine. 
As per claim 33: 

Pinkerton discloses a adaptor, comprising: 

a network interface controller adapted to receive fragments of network packets, at least 
some of the fragments originating from network packets encrypted prior to fragmentation; (col.4, 
lines 50-57 and col.6, lines 40-44) 

a communication protocol offload engine to reassemble the network packets from the 
received fragments; (col.2, lines 12-16 and col.18, lines 15-21) 

a security offload engine to decrypt at least a portion of the reassembled network 
packets to provide decrypted packets; and (col.4, lines 50-57) 

logic adapted to selectively return at least some of the decrypted packets to the 
communication protocol offload engine, (col.20, lines 55-57) 

As per claim 34: See col.2, lines 12-16; discusses the adaptor of claim 33 wherein the 
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communication protocol of the communication protocol offload engine is the Transmission 
Control Protocol (TCP) and Internet Protocol (IP). 
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